What is CVE-2019-6194?

CVE-2019-6194 is a medium-severity vulnerability in Lenovo Xclarity_administrator, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 5.7/10. Published 2020-02-14.

How severe is CVE-2019-6194?

Medium severity. CVSS v3 base score is 5.7 out of 10.

XXE in Lenovo Xclarity_administrator

CVE-2019-6194

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.

Vulnerability class: XXE (XML External Entity)

EPSS: 0.007 (50.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N.

Affected products

Lenovo Xclarity_administrator
Lenovo Xclarity Administrator (Lxca) — versions unspecified

Weakness classification (CWE)

CWE-611 — Improper Restriction of XML External Entity Reference (XXE)

References

psirt@lenovo.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-6194?: CVE-2019-6194 is a medium-severity vulnerability in Lenovo Xclarity_administrator, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 5.7/10. Published 2020-02-14.
How severe is CVE-2019-6194?: Medium severity. CVSS v3 base score is 5.7 out of 10.